diff --git a/cves/2022/CVE-2022-21500.yaml b/cves/2022/CVE-2022-21500.yaml index 7ff23b5502..974565d332 100644 --- a/cves/2022/CVE-2022-21500.yaml +++ b/cves/2022/CVE-2022-21500.yaml @@ -5,12 +5,12 @@ info: author: 3th1c_yuk1,tess severity: high description: | - Oracle E-Business Suite (component: Manage Proxies)12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite accessible data. + Oracle E-Business Suite (component: Manage Proxies) 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite accessible data. reference: - https://orwaatyat.medium.com/my-new-discovery-in-oracle-e-business-login-panel-that-allowed-to-access-for-all-employees-ed0ec4cad7ac - https://twitter.com/GodfatherOrwa/status/1514720677173026816 - - https://nvd.nist.gov/vuln/detail/CVE-2022-21500 - https://www.oracle.com/security-alerts/alert-cve-2022-21500.html + - https://nvd.nist.gov/vuln/detail/CVE-2022-21500 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5